Aesto Breach Exposed Sensitive Data of More Than 9.5 Million People
Summary
Aesto disclosed that hackers accessed its AWS infrastructure in December, exposing sensitive information belonging to more than 9.5 million people across at least 30 healthcare organizations.
Key points
- Aesto said hackers accessed its Amazon Web Services infrastructure from December 2 to December 18.
- The exposed information included names, Social Security numbers, medical and health insurance data, driver’s license numbers, and financial account details.
- At least 30 healthcare organizations were affected; Aesto filed breach notices on behalf of customers, including Together Women’s Health.
- Aesto had warned customers about the incident in June, but disclosed its scope to federal regulators this week.
- No hacking group has publicly claimed responsibility, and Aesto did not respond to requests for comment.
- The article also reports separate recent healthcare incidents involving Baylor Genetics, CareCloud, and Park Dental Partners.
Article Details
- Victim Organization
- Aesto
- Incident Type
- Cyberattack and data breach involving unauthorized access to Aesto's Amazon Web Services infrastructure and theft of data.
- Incident Date
- 2025-12-02
- Data Types Exposed
- Names
- Social Security numbers
- Medical information
- Driver's license numbers
- Financial account numbers
- Health insurance data
- Affected Records
- More than 9.5 million people
- Operational Impact
- At least 30 healthcare organizations were affected. The article does not report operational disruption at Aesto.
- Ransom Or Extortion
- None reported
- Claim Status
- confirmed